PAYMENT SLIP[.]zip | Triage

Sharing

General

Target

PAYMENT SLIP.zip
Size

704KB
MD5

dbf04ee1e6e2558f123a342ebc88573b
SHA1

46482e19b2fb361660ce926bf5378430443956a9
SHA256

ca85116a906c89b87336c43bbc9efe21b5428997fac2ba12031eb093e69e573c
SHA512

1771216c901d99ccef3102bf50800a40b1bda7f866cdca77dee499115620579f6977cc38caa88295a132ab160b1d24ad3fafdd37c9f2f148d3d0b76ec39245a3
SSDEEP

12288:03zOXO2ijIRhWT0CqwVfcr7VBLJ/da5TZo5pa11eD4m0eXIAxNrtek4McW0UdgyD:03SXO1UR00cVfcr7Ro8o1aIADwrMsKLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PAYMENT SLIP.exe

Files

PAYMENT SLIP.zip
.zip
PAYMENT SLIP.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ